AI risk assessment process explained — scoping, four control areas, scoring, cross-border governance and a three-team operating model that turns assessment into operational discipline.